7553b6ee1eb3652de05bcce7bb876619eedd469350d97d1e0b8bb862004e3298

Analysis

max time kernel
5s
max time network
142s
platform
android_x64
resource
android-x64-arm64-20240603-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240603-enlocale:en-usos:android-11-x64system
submitted
10/06/2024, 07:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9a6dd55e076340543591e56cbfbd78bc_JaffaCakes118.apk
Size 4.5MB
Sample240610-jdnrhsef37
SHA256 7553b6ee1eb3652de05bcce7bb876619eedd469350d97d1e0b8bb862004e3298
MD5 9a6dd55e076340543591e56cbfbd78bc
SHA1 a5b1014de13ecabcde59e99b1ebf9577966b5a46
SHA512 b4b1a0ef3c5d7c998b2d134b16ec6a06e1cfa062cbad8d2b03d2bdfcf147f39f016611d342690456dfc24aa78c18c4ccc2244b4b34bcbdd55cf42ad0f364f1b6
SSDEEP 98304:NMOc411QohRNQTzAWSuEiTUf09JTRUEsjIgLyONy8qA:NYUhR6AWSu9Is9JTR4keyHA
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.asudhuie.fgrthgtrt/[email protected]	4579	com.asudhuie.fgrthgtrt

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.asudhuie.fgrthgtrt

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.asudhuie.fgrthgtrt

com.asudhuie.fgrthgtrt
1⤵
- Loads dropped Dex/Jar
- Queries information about active data network
- Queries information about the current Wi-Fi connection
PID:4579

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

classes.dex

Path /data/user/0/com.asudhuie.fgrthgtrt/.jiagu/classes.dex
Size 3.3MB
SHA256 b185d5df5352ff1672b737f19914c6add501e7b1f249207d6f51d3cedb012c0f
MD5 706a61c98988c10fceeeb73fcfe3a63e
SHA1 087c8eefd57367b0844469003ff9db3ad0327ff7
SHA512 b80a6e36d7fd4ed42c5baab55850157b485301444716626fa83651d929011bb594557da5e70f963045e1fbeb3034f25a25b510671c159373b6393109bbfa4c7a
SSDEEP 49152:nO0dvLyX9S6eIZsUAgJf3AXx1W4N4v9xJXXmxZFN7XLhl+eVLbZ:nHdv2X9S6oUAm3AXWdm3LF
MD5 SHA1 SHA512 SSDEEP

Submit Download

libjiagu.so

Path /data/user/0/com.asudhuie.fgrthgtrt/.jiagu/libjiagu.so
Size 382KB
SHA256 e432c191f918053ce368e1b1f155b2e1f9e84379611b93aabec0106172b73aa2
MD5 aa01dd97609092ce310e17bf791069ce
SHA1 f000840a8f68ea7beb2e29ea466088daf55609db
SHA512 766c120a06215d0950aae32026fcde3eafed8d18ae0de7bc8135a7378a9055c8f0040d61574d9af67fe2b5b90eeae64c62d787343858ae375bb6658df8afe7b4
SSDEEP 6144:wnNmS07fgPhZt6JPeJqE2sPovWSpp8BWwprOFM4UNXqUV64WHRZDYQwYW2f5l8DV:McffCZt8eJ9paWS7kprOFM4UN6UNWbat
MD5 SHA1 SHA512 SSDEEP

Submit Download

[email protected]

Path /data/user/0/com.asudhuie.fgrthgtrt/[email protected]
Size 6.1MB
SHA256 408fa98e91621f890e7cc61ca85f754ece6aaaa060f0b7b1e32e5d795ca13b75
MD5 9938f85abfe6e6b599141c77d5ba0c73
SHA1 d51a766cfa08f16adfe9400545196b69a9147418
SHA512 60be4b1ee83e17f81641b3f15f9bf39b6c0ce9c70bcf24ae3b81320ffb1c3fa9b9b6b8e990ae97772eca4303b85d782f12bde5e4b12587d8ea10e90ca2a39b98
SSDEEP 49152:2LUK+diMFY2DmSBhVssEGKO6fhRK8TWPF7ZjBl5qN9xJXXmxZFN7XLhl+eVLbZ:2LXMFYpLm3LF
MD5 SHA1 SHA512 SSDEEP

Download

.jg.di

Path /data/user/0/com.asudhuie.fgrthgtrt/files/.jglogs/.jg.di
Size 340B
SHA256 1b7afba4c715e77fbe42cec0d40f028e3e3906009b6d4ae1754ab09d6116f6b6
MD5 b01300358e8e49bade5a4ecfb646fc75
SHA1 74137c7716157d4634082c38b2004bc3740842be
SHA512 d605d280861d5fb0658a8a8956cc14e1abd69904cd0da1dc45746577332cca2351a055c4ffc0443b017718e48a50c3dd9296b71015e2903c9996680836214049
MD5 SHA1 SHA512

Submit Download

.jg.ri

Path /data/user/0/com.asudhuie.fgrthgtrt/files/.jglogs/.jg.ri
Size 314B
SHA256 4373328d83e04dcb2bfb12a3201dedea13e663c2421adc565660aac66c9fc480
MD5 197e5bef9dfb621fe5e0b78b2e03bced
SHA1 41298814c5c717816ccf2806c16f7867595ed9e2
SHA512 83bd8c165028ec8a41bc5263e6d1c8af4f495aa329054b6e8871c430242361727e34af7ea7f478c97d13cb6f5a5310be5c33e507663d193684b5df5ef69cb40d
MD5 SHA1 SHA512

Submit Download

.jiagu.lock

Path /data/user/0/com.asudhuie.fgrthgtrt/files/.jiagu.lock
Size 27B
SHA256 eb434a1351b33af413852bbe03e4eeeace7c86ce80b182b888ac5481f05acabe
MD5 362709054ab925e9c89c9906ec353e48
SHA1 e1fea4a5d1b228eb63ca9a642642459d0bc392c8
SHA512 d929ea05324d5aa77ed3edab79e8af27e46b1a6b3a585de219343293742af5d2ea02a0c490d33dc88b888fd1479a5a8fcce188ab0c5400c27ca315898ae507e3
MD5 SHA1 SHA512

Submit Download

.deviceId

Path /storage/emulated/0/360/.deviceId
Size 48B
SHA256 36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731
MD5 4c4c5285293d5141f582aefa4e038669
SHA1 e01852a72e5a8e6f7d63a21426b515118196047b
SHA512 097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399
MD5 SHA1 SHA512

Submit Download

.iddata

Path /storage/emulated/0/360/.iddata
Size 32B
SHA256 2ee19d46c4d7e4f7987181d1ee1cd8e7ef3d26b9f747b456ac6160985d1a22f0
MD5 ed2b8ce0646f9e19739298498b630e78
SHA1 cb48e4aa0b574ad0303fbaef8d7c8517322a70f8
SHA512 29a2af07aea1ff696f8807ae236350751d7481764842ebb162a23b33c9593cbc759579c1c53a2e95bb61d6e3ea8bf27431a9742493ae7ef2f89a2a47ef73d2bc
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads